$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft File: jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json) Hash identifier: G7A0UCG4VmF/5RDvjCjPr3VqJRsJ//EivSFHD7RcS4c= Subject key identifier: 5E:02:67:CB:F1:49:D1:B8:6C:29:85:4E:90:7E:83:D6:80:53:D7:85 Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft Manifest number: 0218 Signing time: Sat 19 Jul 2025 02:27:19 +0000 Manifest this update: Sat 19 Jul 2025 02:27:18 +0000 Manifest next update: Sat 26 Jul 2025 02:27:18 +0000 Files and hashes: 1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: GBJpsvbnGrxpZj2DNjwgdjwEemkbKR2i897vEV7gW8g=) 2: 99E52804462E11ED90035452C4F9AE02.roa (hash: mhhqfIxRoBjhuINkZ3XIMhFtJRPA+gdmIPhSIee7DFc=) 3: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: gcq2OURWYuZ9mt7r/ew2O7bw4Is8Oj5yrAJBkVF7NPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Validity Not Before: Jul 19 02:27:18 2025 GMT Not After : Jul 26 02:27:18 2025 GMT Subject: CN=687b0286-d4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:8d:7a:18:c3:95:98:82:0f:24:f6:b7:a7: 4c:26:87:eb:ff:e3:eb:e5:74:a6:26:13:77:aa:41: 46:2f:2d:47:83:71:fa:ec:a3:f4:f6:ee:19:11:fe: 0b:82:7c:04:13:28:02:dc:65:8e:68:61:f7:d2:c9: 2f:3f:06:b7:20:4c:87:71:98:03:fe:9c:90:c7:d0: 36:26:67:9c:28:df:e5:bd:a8:68:1e:ed:87:40:43: 7a:b6:13:9f:ee:7f:b1:bb:c4:47:ea:90:c6:fa:5a: da:d2:50:ae:fc:60:04:a1:5d:4b:ee:bc:96:f8:cc: d7:00:38:a9:1e:1f:c0:6d:8d:39:9c:c0:fd:79:8c: a5:65:aa:f2:c4:e0:b7:c2:8e:c7:f3:8e:c1:89:f8: b5:90:a9:cc:e9:cf:c1:a7:04:fd:c4:f7:92:52:5e: fd:f9:9a:92:85:a6:dd:27:da:1f:f1:a9:40:20:05: 74:07:7f:20:b7:47:8a:8e:08:4b:fc:ab:b3:29:5f: f2:e5:7a:fc:aa:99:3e:35:8e:54:04:9b:9f:b3:66: d7:ef:a1:a0:2a:0b:1b:fe:f0:98:c3:1d:65:1a:f7: 30:40:8c:19:bd:5e:7a:5a:78:ab:e2:2e:ef:87:e4: fe:fa:09:8a:fc:9d:f6:33:4e:a5:b1:d5:eb:cc:9f: 5a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:02:67:CB:F1:49:D1:B8:6C:29:85:4E:90:7E:83:D6:80:53:D7:85 X509v3 Authority Key Identifier: keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a8:6a:ec:16:41:10:b0:a8:63:2d:b0:2b:7d:52:26:bd:63: 42:b8:f2:1c:9f:ae:40:90:23:62:f7:15:76:9e:3a:b2:8f:ba: db:a8:de:e2:03:5c:0b:8a:ad:3e:2c:ed:b9:51:ab:d3:0d:ed: a4:bf:7a:27:db:f3:85:f6:2a:7e:e2:fb:de:dc:70:9a:42:fa: cc:9b:67:e5:71:6c:49:da:36:54:84:e3:78:9f:a2:ec:35:7f: c1:a6:d7:51:74:98:18:5d:8c:9c:78:a5:52:5c:9d:bb:e3:67: 8c:24:9e:47:4e:ef:cd:a4:c3:6b:69:57:39:1c:32:cb:ef:3d: 6d:2d:84:94:cc:7f:2d:82:b7:83:a1:63:a2:4e:bc:29:ae:76: ec:b9:c0:50:ac:26:a3:7d:a6:dd:2b:fb:f3:6c:9f:49:74:aa: 78:cb:09:a7:a1:d6:e1:31:bf:f1:01:94:7c:2d:cb:c5:6e:93: 9b:e0:5a:37:70:bd:f5:14:23:1b:92:f2:6b:5a:98:20:b8:72: 04:ce:8b:86:10:9d:4d:c9:72:06:b6:c9:5e:35:92:95:f9:d3: c1:9b:87:12:a7:19:9e:54:61:0d:7c:59:cd:5b:88:83:1a:c6: 24:26:d6:ee:6d:1e:88:9d:70:c5:cd:f1:4a:e3:8a:a9:16:cd: 13:83:14:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKDhGMEJFQTNEOTZGQzhFMkVEMUU4QzY4MzcwNDc2OTQ1 NjlFRUUzQ0UwHhcNMjUwNzE5MDIyNzE4WhcNMjUwNzI2MDIyNzE4WjAYMRYwFAYD VQQDEw02ODdiMDI4Ni1kNGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzSNehjDlZiCDyT2t6dMJofr/+Pr5XSmJhN3qkFGLy1Hg3H67KP09u4ZEf4L gnwEEygC3GWOaGH30skvPwa3IEyHcZgD/pyQx9A2JmecKN/lvahoHu2HQEN6thOf 7n+xu8RH6pDG+lra0lCu/GAEoV1L7ryW+MzXADipHh/AbY05nMD9eYylZaryxOC3 wo7H847Bifi1kKnM6c/BpwT9xPeSUl79+ZqShabdJ9of8alAIAV0B38gt0eKjghL /KuzKV/y5Xr8qpk+NY5UBJufs2bX76GgKgsb/vCYwx1lGvcwQIwZvV56Wnir4i7v h+T++gmK/J32M06lsdXrzJ9aKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4CZ8vx SdG4bCmFTpB+g9aAU9eFMB8GA1UdIwQYMBaAFI8L6j2W/I4u0ejGg3BHaUVp7uPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9EQTIyNDBFNjQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGppN1I2TWFEY0VkcFJXbnU0 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2p3dnFQWmI4amk3UjZNYURjRWRwUldudTQ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9EQTIyNDBFNjQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGpp N1I2TWFEY0VkcFJXbnU0ODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABqGrsFkEQsKhjLbArfVImvWNCuPIcn65AkCNi9xV2njqyj7rbqN7i A1wLiq0+LO25UavTDe2kv3on2/OF9ip+4vve3HCaQvrMm2flcWxJ2jZUhON4n6Ls NX/BptdRdJgYXYyceKVSXJ2742eMJJ5HTu/NpMNraVc5HDLL7z1tLYSUzH8tgreD oWOiTrwprnbsucBQrCajfabdK/vzbJ9JdKp4ywmnodbhMb/xAZR8LcvFbpOb4Fo3 cL31FCMbkvJrWpgguHIEzouGEJ1NyXIGtsleNZKV+dPBm4cSpxmeVGENfFnNW4iD GsYkJtbubR6InXDFzfFK44qpFs0TgxSi -----END CERTIFICATE-----Generated at Sun Jul 20 18:45:05 2025 by rpki-client